pulumi/pkg/resource
Justin Van Patten 7ebcc42455
Downgrade remediate policy violations to mandatory (#15618)
Policy violations should not have a remediate enforcement level. The
Policy SDK currently downgrades the level from remediate to mandatory
for resource policy violations, but isn't currently doing that for stack
policies. A change to the Policy SDK is in-progress to do that.

This change applies the same behavior to the engine. If a resource
policy still has a violation after running remediations and the level is
remediate, "downgrade" the level to mandatory. Similarly, if a stack
policy has a violation with a remediate level, downgrade it to
mandatory.

This avoids a panic when getting a policy violation from a stack policy
and the enforcement level is remediate.

Related: https://github.com/pulumi/pulumi-policy/pull/339

Fixes https://github.com/pulumi/pulumi-policy/issues/332
2024-03-07 15:10:36 +00:00
..
analyzer Clean up uses of .Error() (#14965) 2023-12-20 15:54:06 +00:00
deploy Downgrade remediate policy violations to mandatory (#15618) 2024-03-07 15:10:36 +00:00
edit State: fix panic when deleting non-unique Provider (#15322) 2024-02-05 16:21:38 +00:00
graph State: fix panic when deleting non-unique Provider (#15322) 2024-02-05 16:21:38 +00:00
provider turn on the golangci-lint exhaustive linter (#15028) 2024-01-17 16:50:41 +00:00
stack fix panic on deserializing deployment (#15599) 2024-03-07 09:31:57 +00:00
testdata ci: radical idea - what if slow tests & no stdout makes GH consider runner dead? 2022-03-06 14:52:13 -08:00